Ion Auth - Lightweight Auth System based on Redux Auth 2

[eluser]Ben Edmunds[/eluser]
Bernd,

It's not necessarily more or less secure than it was before since the password is already based off a random salt but it is more secure than saving the sessions individually specifically for the use case you described.

The only time you might have an issue with the case you described would be if you changed your password and did not login with "remember me" in which case you're remember_code would not be reset.


So I just pushed a change to reset the remember_code when the password is changed so it will force all remembered instances of the user to re-login whenever the user's password is changed.

Thanks,